How CyberPhone addresses the EU General Data Protection Regulation.
Effective: July 6, 2026
This statement explains how CyberPhone meets its obligations under the EU GDPR.
This statement applies to personal data of individuals in the EEA that CyberPhone processes as a controller for its own activities, and as a processor on behalf of customers.
We process personal data on the basis of contract performance, legal obligation, legitimate interests, and—where applicable—consent.
Individuals may exercise rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent and lodge a complaint with a supervisory authority.
We respond to requests within one month, extendable by two months where necessary.
We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law.
Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses and supplementary measures.
This platform is provided exclusively to government intelligence agencies, police departments and law enforcement organizations for the authorized monitoring, protection and coordination of their undercover operatives. Every operation requires lawful authority within the acquiring jurisdiction, and the acquiring agency remains responsible for the authorization covering each enrolled device. We do not provide the platform for unauthorized surveillance, stalking, or use outside a lawful investigation. Each request is reviewed before any acquisition, and all deliveries are conditional upon acceptance of our legal notice.